Copyright: Kevin Gearhart
Citation: Kg'98


Contents

What does fileWATCH do?

Saving a FW3 image file

Finding changes

What exactly is monitored?

RSA MD5 signatures

Opening a RPT file

Saving a RPT file

Printing a RPT file

Removing files

Registered Options

FAQ

Registering fileWATCH

History of fileWATCH


What does fileWATCH do?

This program monitors the hard drives on your system using saved  image files and reports extra, missing, and changed files. Use it to monitor program installations to see where files are scattered or  even watch what files are tampered with over time, etc.

To test it out:

1. Save a FW3 image file.

2. Delete, move, or create a file.

3. Find changes.


Saving a FW3 image file

1. Under Settings Tab

Highlight drive or folder to WATCH.

Use Shift or Control to make multiple selections.

2. Under Settings Tab

 	Highlight folders you wish to exclude from

scan. All folders and files within highlighted

folders will be ignored. Use Shift or Control

to make multiple selections.

3. If you are a registered user

Configure choices under Registered Options.

Decide if you want to save RSA MD5 file

signatures, etc.

4. Under File Menu

Select Save .FW3 file


Finding changes

1. Under File Menu

Select Open .FW3 File

Choose desired image file.

2. If you are a registered user

If RSA MD5 file signatures were saved,

you may decide to check them or not.

3. Tabs

Browse the Changed, Extra, and Missing Tabs


What exactly is monitored?

Missing & Extra files

These files are found by simply checking

current filenames on the system with those

saved in an FW3 image file.

Changed files

When a file isn't missing or extra, it's

current status is again checked against

saved data:

Attributes: Read Only, Hidden, System, Directory

Date & Time: Windows Stamp

Size: Bytes

RSA MD5: Calculated internal file signature.


RSA MD5 signatures

Registered users have the option to create a RSA MD5 key for each file. This key should be unique enough to detect any internal changes in case the attributes, date, time, and size of a file remain unchanged.

--

Copyright (C) 1991-2, RSA Data Security, Inc. Created 1991.

All  rights reserved.

License to copy and use this software is granted provided

that it is identified as the "RSA Data Security, Inc. MD5

Message-Digest Algorithm" in all material mentioning or

referencing this software or this function.

License is also granted to make and use derivative works

provided that such works are identified as "derived from

the RSA Data Security, Inc. MD5 Message-Digest Algorithm"

in all material mentioning or referencing the derived work.

RSA Data Security, Inc. makes no representations

concerning either the merchantability of this software

or the suitability of this software for any particular

purpose. It is provided "as is" without express or

implied warranty of any kind.


Opening a RPT file

You can load a report in the future to remove the Extra files found.  Changed and Missing files saved with the report are also viewable.

1. Under Report Menu

Select Open .RPT File


Saving a RPT file

After loading an image file and finding changes, you may want to save the list of extra files found for later removal.  Changed and Missing files are also saved in the report.

You may remove single or multiple file listings from the report windows by highlighting them and pressing the 'Remove Selected Files from Report' button. This does not actually delete any files.

1. Under Report Menu

Select Save .RPT File


Printing a RPT file

The current Report under the Printable Report tab can be printed.  Text in this window may be edited before printing.

1. Under Report Menu

Select Print .RPT File


Removing files

You may move Extra files listed in a current or saved report  to the Windows Recycle Bin.  For safety, this means they may be un-deleted until you empty the Bin from Windows.

1. Under EXTRA Tab

Highlight files you wish to remove.

Use Shift or Control to make multiple

selections.

2. Under EXTRA Tab

Click 'Send Files To Recycle Bin' button.


Registered Options

When a new .FW3 file is saved, the data below is

saved for each file only if the corresponding

checkbox is activated.

1. Store Size

Save size (bytes) of each file.

2. Store Attributes

Save attributes (RHSDA) of each file

and folder.

3. Store Date / Time

Save Date & Time of each file and folder.

4. Store MD5 Signatures

Save RSA MD5 signatures for files.


FAQ

1. How do I ignore the Recycle bin(s)?

Select 'Add: Define Folder Mask' button

from the Main Settings Tab.  Then enter

c:\Recycled\ to prevent from scanning.  If

you have more than one hard drive,  enter

:\Recycled\ to ignore all of your bins.

2. Why is a folder/file inaccessible?

This means it was not accessible via

Windows (not  DOS compatible.) Shared

Netware and/or MAC volumes may have

some un-scannable folders. If a file is

not accessible, you may want to

CHKDSK or ScanDisk for errors.

3. 'Messages saved in fileWATCH.log?'

If a folder/file is inaccessible or any other

problem occurs it is noted in the log file.


Registering fileWATCH

  If you find this program useful then you are obligated to support shareware and send me a $10.00 (US currency) registration fee.

  In return, you will receive a registration code via electronic (fast!) or snail mail applicable for any future revisions of version 3.  Click the link to fileWATCH's homepage in Help|About if you wish to register over the web with credit card. Thanks!

fileWATCH v3

Kevin Gearhart

162 Steeles Fort Rd

Raphine, VA 24472


History of fileWATCH

  The grandchild of this Delphi version is based on a simple Turbo Pascal DOS utility I wrote before Windows 3.1 was even introduced.

  I have ported the code between various versions of VB and Delphi since then.  As a result, my folder scanning algorithm has been optimized for speed and accuracy over time.

  The RSA MD5 signature algorithm was added in version 3 of the project. I had experimented with CRC checksums in the past for a similar feature.

  I hope you enjoy...Kg'98